topic Re: FIPS 140 and CC enabling in General Topics

FIPS 140 and CC enabling

cengasser — Fri, 24 Apr 2020 15:35:01 GMT

Couple of questions on FIPS.

When you enable FIPS140 on a Palo it wipes the device. Can you just reload your last saved?
Can a FIPS140 enabled device talk to a non-FIPS device over an ipsec tunnel provided the cyphers are compatible?
FIPS disables PAP. System wide? or Just for authentication to the FW? Our Radius doesn't support CHAP.
Anything else that will cause my resume to spontaneously print out?

Thanks.

OtakarKlier — Sat, 25 Apr 2020 17:25:47 GMT

Hello,

Here is what happens when FIPS is enabled:

I would say test, test, test, and this can cause your question 4.

Regards,